Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier: xvZFUgAUSiU++sBBR4dpuyAJVDSq7s3qAa605awuYes=
Subject key identifier: B2:98:8F:EE:20:17:5C:5F:DE:50:83:01:28:8E:C7:F2:D8:22:34:F0
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 0194BD17948B292A5B6ECB4B4599807B9FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number: 10FC
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: 604C6MkUjxA1i8qtaDTDYmQQYATQCg4zvaw+q1X1V3k=)
2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:8b:29:2a:5b:6e:cb:4b:45:99:80:7b:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=b2988fee20175c5fde508301288ec7f2d82234f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:41:5d:a1:51:51:a6:81:2a:2e:ad:af:9f:
c2:7b:7c:38:ce:51:c3:b2:72:db:30:04:c1:06:1f:
c2:ad:b6:71:c5:db:be:ee:95:ad:8c:32:70:9c:c4:
26:5a:19:ad:d1:67:07:a3:ad:59:91:24:64:6a:b0:
4f:af:4d:40:65:d2:fb:e0:c4:33:ba:ef:8e:12:96:
f9:00:ee:7c:46:8f:94:09:d2:82:c6:78:c8:46:8f:
46:b1:02:0c:98:4a:54:9e:47:f7:63:b8:f2:4e:eb:
b1:21:6f:ce:cb:1a:ea:b6:8d:cb:25:09:de:e6:39:
7c:f7:fd:f9:86:23:3c:71:10:e5:1a:02:b2:9a:48:
06:3d:fc:d5:0c:a8:c5:76:b6:a3:99:9b:3c:cc:9d:
25:3c:26:03:eb:27:8b:66:00:e7:32:84:ff:92:0e:
d2:da:be:7e:22:b0:ab:60:79:c0:35:31:45:7a:6f:
2b:94:29:5e:1a:0c:c0:ad:b7:98:94:97:df:d4:9f:
a8:d7:0c:ea:32:7d:5d:5d:0e:ca:9d:bf:34:ae:cd:
9c:48:63:1c:69:5b:05:b5:17:ec:67:a7:fc:7d:ba:
fb:ac:35:bd:e8:b2:a6:68:11:ee:90:19:35:89:af:
af:02:64:ad:f6:45:3e:73:d5:7b:61:73:9b:19:c2:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:8F:EE:20:17:5C:5F:DE:50:83:01:28:8E:C7:F2:D8:22:34:F0
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b2:ee:21:39:78:39:84:f3:bd:df:71:7f:e1:36:48:1f:8e:
bc:59:ab:37:1e:db:17:c3:10:44:de:97:4b:7d:7f:f4:a8:fb:
00:43:42:ee:a0:d8:14:1b:12:37:2e:74:e4:79:14:a5:0b:0a:
cf:87:4d:dc:89:8e:82:df:e4:d9:0a:1a:3b:dc:de:3d:67:1a:
de:dc:f8:72:6f:4e:29:1a:7e:a7:28:51:bc:ed:02:83:8b:69:
d4:de:0b:61:3a:fa:5a:5f:8f:99:1c:b4:3a:ee:94:4a:a6:7f:
78:21:8f:be:60:46:19:50:72:89:a2:37:54:30:d8:69:18:23:
08:7a:44:b2:63:e8:16:90:5c:6a:a1:6a:23:ae:3f:f4:95:8f:
cb:1f:ab:8b:1b:5e:a3:10:82:a5:fe:b3:cc:ca:4a:89:f2:56:
32:ca:4f:0d:83:67:bf:3c:22:ef:85:a2:38:7d:28:05:d7:6a:
fb:54:19:b0:cd:92:6a:22:73:13:db:dc:99:21:8a:a2:b7:b2:
42:27:ed:26:4f:50:fe:9a:d2:f4:02:eb:b5:da:c9:22:cb:bd:
c5:0b:a5:77:77:fb:6d:04:2d:a6:d4:01:cf:7d:c0:2e:5d:45:
0b:93:0c:08:ff:bf:77:ab:7c:ad:f3:b0:05:ed:e5:89:eb:47:
a4:52:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:57 2025 by rpki-client